No anonymous crypto wallet hides what the Bitcoin ledger records. A wallet that asks for no signup keeps your name off one company’s database, nothing more. Every transaction stays public forever, change outputs and reused addresses link your coins together, and any exchange, shop or wallet server that knows you can join that trail to your name.
Listen to this article, about 12 minutes. A synthetic voice reads the article and announces each section title as it begins; tables are read row by row and the questions at the end are left out.
Recorded 10 October 2026 from the article as published that day. Press a chapter to jump there; the highlighted line is what is playing. A play button sits beside every section heading, and once you scroll past this player a bar at the bottom of the screen keeps the controls in reach. Tap or click any sentence to hear the reading start from there.
On this page: a breakdown of what the public ledger records, a walkthrough of change output linking, and a checklist of privacy habits.
Think you already know this? Five questions, one minute.
Every answer is on this page. Answer from what you know now; the page fills in the rest.
-
1. According to the original Bitcoin whitepaper, how is privacy achieved on the network?
Section 10 of the Bitcoin whitepaper explains that privacy is maintained by keeping public keys unlinked to personalities, though it warns some linking is inevitable. Read the section
-
2. If you use your own wallet that has never touched an exchange, what links your addresses together?
As noted on the Bitcoin Wiki, transactions are linked by actions like spending multiple inputs together, change outputs, and reusing addresses. Read the section
-
3. What is the ’round number rule’ commonly used by blockchain observers to analyze transactions?
According to the Bitcoin Wiki, observers assume payments tend to be round numbers while change tends not to be, which helps identify the change output. Read the section
-
4. In the December 2020 Ledger data leak, how many detailed records containing names and physical addresses were exposed?
While the company initially estimated 9,500 detailed records were leaked, the chief executive’s message later confirmed the dump contained about 272,000 records with names, postal addresses, and phone numbers. Read the section
-
5. What did a bitcointalk user describe as the most dangerous version of the phishing scams following the order leak?
As discussed on bitcointalk, users reported receiving physical letters with QR codes, which was described as highly dangerous because people do not typically expect scams by post. Read the section
Checked on 21 September 2026 against the Bitcoin project’s own privacy guidance, its developer documentation, the original whitepaper, and two Ledger breach notices. This page explains what gets recorded and what a wallet does and does not conceal. It is privacy hygiene, the same instinct that stops you pinning a bank statement to the front door. It is not a guide to avoiding identification or any reporting duty, and it recommends no service for that.
Is any crypto wallet actually anonymous?
Search the phrase and you get a wall of listicles ranking the best anonymous wallets, most written by sites paid when you download one. What those wallets usually offer is no account: no email, no ID upload. Useful, but it describes the wallet company’s records, not the blockchain’s.
The Bitcoin project is blunter than its fans. Its privacy page says all Bitcoin transactions are public, traceable and permanently stored in the network, and that because people usually reveal their identity to receive goods or services, addresses cannot remain fully anonymous. That is the project describing itself, not a critic.
The design goal was never anonymity. Section 10 of the Bitcoin whitepaper describes privacy as keeping public keys unlinked to people, the way a stock exchange publishes the time and size of every trade without the names. It also warns that some linking is unavoidable, and that once the owner of one key is revealed, the links can expose their other transactions. Pseudonymous is the accurate word. Anonymous is the marketing one.
What does the Bitcoin ledger keep forever?
The useful question is not which wallet is anonymous but what is recorded, where, and who can connect it to you. This table compares the three ways people commonly hold coins. Each row is drawn from a primary source, linked in the last column.
| What is recorded | Custodial exchange account | Own wallet, funded from an exchange | Own wallet, never touched an exchange | Source |
|---|---|---|---|---|
| Public forever | The exchange’s own on chain deposits and withdrawals; your balance sits in its private books | Every transaction, amount and address your wallet uses | Every transaction, amount and address your wallet uses | bitcoin.org |
| What links your addresses together | Not needed: the exchange simply knows | Spending several inputs at once, change outputs, reused addresses | The same: spending several inputs at once, change outputs, reused addresses | Bitcoin Wiki, Privacy |
| What joins an address to your legal identity | Your verified account itself | The exchange’s withdrawal record to your first address; transfers between providers carry sender and recipient details under the travel rule | Whoever paid you or was paid by you and knows who you are; the shop that shipped your hardware wallet; any wallet server that sees your addresses and IP address | FATF; Ledger, July 2020 |
| Who holds that link | The exchange, and regulators on request | The exchange, plus anyone the exchange’s records reach | Counterparties, shops, servers, and anyone they leak to | The Register, January 2026 |
The right hand column is the one the listicles sell. A wallet that never touched an exchange still receives coins from somebody, and the same Bitcoin privacy page notes that anyone listening on the network can log the IP addresses relaying a transaction. On who can move coins, as opposed to who can see them, see what non custodial actually means for control of your coins.
How does a change output link your addresses?
Bitcoin does not spend part of a coin. It spends the whole unspent output and sends the surplus back to you, which the Bitcoin developer guide calls a change output. Here is the chain an observer can follow, with round numbers so the arithmetic is visible.
- You withdraw 0.05000000 BTC from a verified exchange account to address A in your own wallet. The exchange records that it sent those coins, to that address, at that time, for your account.
- You pay a merchant 0.02000000 BTC. Your wallet spends all of A and creates two outputs: 0.02000000 to the merchant and 0.02997800 back to a new change address C. The fee is 0.00002200, which is 2,200 satoshis, about 110 virtual bytes at 20 satoshis each.
- An observer applies the round number rule from the Bitcoin Wiki: payments tend to be round, change tends not to be. So 0.02 is the payment and 0.029978 is yours. C is now linked to A, and A is linked to your exchange account.
- Next month you spend C together with a separate coin a friend sent you. Transactions with several inputs reveal common ownership, as the whitepaper itself says, so the friend’s coin joins the same cluster.
- The merchant, who shipped you something, has your postal address against address A’s payment.
None of that required a hack. A new address for every payment, the default in modern wallets, slows this down without stopping it, because the change still has to go somewhere. We walked through the same mechanism from the other end in where the leftover coins from a paper wallet go, where change sent to a new address is what empties a one key wallet.
Where does your name get attached to your coins?
At the edges, almost always. The ledger has no names, but the places coins enter and leave it mostly do.
| Point of contact | What it can learn | Source |
|---|---|---|
| Exchange with identity checks | Your identity against every deposit and withdrawal address | Bitcoin Wiki |
| Transfer between two regulated providers | Sender and recipient details passed along with the transfer under the travel rule | FATF |
| US broker sales | Gross proceeds reported to the IRS on Form 1099-DA for sales from 1 January 2025 | IRS |
| Light wallet server | Your addresses, and your IP address unless you hide it; Electrum style servers receive address hashes and reply with your history | Bitcoin Wiki |
| Hardware wallet shop | Your name, postal address, phone and the fact that you own a wallet | Ledger, December 2020 |
That last row is the one wallet reviews skip, perhaps because the review links to the shop. Buying a device to guard your keys puts your home address on a list of people who own crypto hardware. Ledger’s July 2020 notice said an unauthorised party reached its e-commerce database through an API key, exposing about 1 million email addresses and, it first thought, 9,500 detailed records. On 21 December 2020 its chief executive’s message said the dump published the day before held about 272,000 records with names, postal addresses and phone numbers.
It happened again. On 5 January 2026 Global-e, the payments partner handling Ledger’s international orders, began notifying customers that order data had been taken, The Register reported. Names, contact details and order contents were exposed; Ledger said recovery phrases, passwords and funds were not. Ledger’s own Global-e incident page is the primary notice. No count of affected customers was published. A different wallet seller disclosed a similar order leak in August 2026, covered in our SafePal review.
What do people whose wallet orders leaked actually report?
We read 10 Trustpilot reviews of Ledger that mentioned a leak, a home address or a scam, dated from August 2024 to August 2026, and two bitcointalk threads with about 20 posts between them. These are what people report, not verified findings. Four accounts were specific enough to use.
- A UK reviewer in January 2026 said the leak exposed their name, home address and the model of wallet they had bought, and that targeted phishing emails arrived within about two weeks (Trustpilot).
- A Canadian reviewer in April 2025 reported dozens of emails from people who knew their full name, address, phone number and which product they owned (Trustpilot).
- A UK reviewer in February 2025 described an email claiming their account was hacked that quoted their home address back to them (Trustpilot).
- On bitcointalk in April 2025 a user described professionally printed letters, posted to leaked addresses, carrying a QR code and a demand to update the recovery phrase or lose service. Another poster called physical mail the most dangerous version, since people do not expect scams by post (bitcointalk).
The range cuts both ways. In an earlier thread from August 2024, two posters said they received Ledger phishing emails despite never owning one, which suggests broad spam lists as well as targeted ones. And none of the accounts we read tied a loss of coins to the leak alone: the damage people describe is exposure, fear and a steady stream of attempts. One review reporting stolen funds did not say how they were taken, so we left it out.
The accounts agree with the official notices on substance: contact details leaked, not keys. They part company on tone. Notices stress that funds were safe; the people on the list describe years of letters and emails that each have to be spotted as fake. Our piece on the Ledger 24 word seed covers why the letters keep arriving.
No hardware wallet maker, exchange or wallet app needs your recovery phrase for any reason. Any letter, email, call, text or QR code that asks for it is theft in progress. Do not enter it, type it or scan anything to reveal it.
Which privacy habits help, and which are sales talk?
| Claim you will see | What it actually does |
|---|---|
| No signup means anonymous | Keeps your name off the wallet company’s servers. The ledger records everything anyway. |
| A fresh address every time | Recommended by the developer guide and on by default in most wallets. Slows linking; change and consolidation still link. |
| Your own node | Stops a third party server learning your addresses. Does nothing about what the ledger itself records. |
| Hardware wallet equals privacy | Protects keys, not identity. The purchase itself can put your address on a leaked list. |
| Never post your addresses | Sound. Bitcoin.org says the same: publishing addresses or purchases lets others identify them. |
The practical version: use a fresh receiving address, do not reuse or publish addresses, understand what your wallet’s server can see, and treat any order data a shop holds on you as potentially public. Our guide to self custody sets out the rest of what holding your own keys takes on.
Privacy Hygiene Checklist
Improve your privacy profile by practicing these basic self-custody habits.
Ticks are saved on this device only.
Frequently asked questions
Is a hardware wallet more private than a phone wallet?
Not by itself. A hardware wallet keeps the keys offline, which is a security property. Privacy depends on how the companion app looks up your balance and on the shop record your purchase created. Both kinds of wallet use the same public ledger.
Can someone see my balance if they know one of my addresses?
They can see everything that address has received and sent, and follow change outputs to related addresses. If you ever share an extended public key, often shown as an xpub, the holder can see every address the wallet derives from it.
Does using a new address every time make me untraceable?
No. It removes the easiest link, address reuse, but change outputs and transactions that spend several coins at once still connect addresses, as the Bitcoin whitepaper itself acknowledges.
Why care about privacy if I have nothing to hide?
Because a visible balance makes you a target. The leaked Ledger customer lists show what happens when the names and home addresses of probable holders circulate: years of phishing letters, emails and calls aimed at those people.
What should I do if my details were in a wallet shop leak?
Treat your name, address and phone number as public. Ignore every inbound contact about your wallet, whatever the channel, and go to the maker’s site by typing its address yourself. Never enter or reveal your recovery phrase.
Does moving coins from an exchange to my own wallet hide them from the exchange?
No. The exchange keeps its record of the withdrawal and the address it went to, and on chain anyone can follow the coins from that address onward. In the US, brokers also report sales on Form 1099-DA from 2025.
Finished the page? The same five questions from the top, to see what stuck.
This article is educational and is not financial advice. Nothing here is a recommendation to buy, sell or hold anything. You are responsible for your own security decisions.
Leave a Reply